Posted May 29, 2008 11:31 UTC (Thu) by NRArnot (subscriber, #3033)
Parent article: Attacking network cards
A long time ago, firmware used to have a write-enable jumper. Time to reinstate it?
To avoid the inconvenience of having to take the covers off a system and rummage in its
innards, it would be an improvement to design the write-protect for each card (motherboard
BIOS, ethernet, RAID controller ...) to have a standard header capable of connection in
parallel with all the others. Then, a system builder could connect them all together and have
a single firmware-write-enable switch on the outside of the system.
Arguments over whether the jumper should be shipped enabled or disabled are much preferable
to not having a disable at all!